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Cx 


Secret Key of Entity X 


Dx 


Private Key of Entity X (a pair dx, nx) 


dx 


Private Exponent of Dx 


Ex 


Public Key of Entity X (a pair ex, nx) 


ex 


Public Exponent of Ex 


K 


Any cryptographic key, Symmetric Key 


Ko 


Group Symmetric Key 


Koo 


Master Symmetric Key 


K{M} 


The Encryption Function of Message M using the Key K 


Kxy 


Session Key, Common Secret Key between X and Y 


Lx 


License or Certificate issued to X 


M 


Plain Message, Plaintext 


Mx 


Message to or from Entity X 


Nx 


ID # of Entity X 


Ni 


ED # of User I 


Nj 


ID # of System Terminal J 


nx 


Modulus of the key pair Dx, Ex 


O 


System Authority 


P 


Encrypted Message, Cipher Message, Ciphertext 


PWx 


Password of X 


Qx 


Challenge Question, Random Number sent to X 


Rx 


Response, Signed by X 


Sx 


Message Signed by X 


X 


Unknown Entity 


Y 


Unknown Entity (Authenticator) 


Z 


Unknown Entity (Authenticatee) 



FIG. 1: Notation 
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(200)^ 



Communication Channel 



Mz 1 I My 



(202) 



Terminal Y 



(204) 



My 



Mz 



Terminal Z 



Cy 



Cz 



(206) 



System Authority O 



FIG. 2: Block Diagram of this Invention, S-RSA 
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Step 

*0 (300) 



*1 (301) 



*2 



*4 



*6 



*7 (307) 



*10 



Authenticator 
Y 



Preparation: 
Generate PWz 



Preparation: Y stores Z's ID # Nz 
and Password PWz 



(302) 



(304) 



(306) 



Request Authentication: 
Send Nz 



Request Password 



Send Password: PWz 



Verify PWz 



(308) 



Send Result 



Authenticatee 
Z with ID # Nz 



where 

Y : Authenticator 

Z : Authenticatee 

Nz : ID#ofZ 

PWz : Password of Z 



FIG. 3: Flow of Conventional Password Authentication 
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Encrypt 



P=K{M} 



(402) 



M is encrypted by K 



Decrypt 



M = K {P} 



(404) 



P is decrypted by K 



where 

P : Ciphertext 

K : Symmetric Key 

M : Plaintext 

{ } : Cryptographic Function 

FIG. 4: Formulae of Symmetric Key Encryption 



Patent Application of Y. Tsukamura for 
"Simplified Method of RSA" continued 
22 



Step 

*0 (500) 
*1 (501) 

*2 

*4 
*5 



*6 



*7 



*8 



Authenticator 
Y 



(507) 



where 

Y 

Z 

Nz 

Kyz 

Qz 

Rz 



Generate Kyz 



Preparation: 
Y and Z share Kyz 



(502) 



(504) 



Request Authentication: 
Send ID # Nz 



Send Challenge Qz 



(505) 



(506) 



Return Rz 



Verify Rz: 
Kyz {Rz} => Qz 



(508) 



Send Result 



Authenticatee 
Z with ID # Nz 



Encrypt Qz with Kyz: 
Rz = Kyz {Qz} 



Authenticator 
Authenticatee 
ID#ofZ 

Secret Common Key between Y and Z 
Challenge Message, Random Number sent to Z 
Response Message from Z 



FIG. 5: Flow of Conventional Symmetric Key Authentication 
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Encrypt 



P = E{M} 
= M e (mod n) 

M is encrypted by E 



M = D {P} 

= P d (mod n) 
= M e * d (mod n) 
= M 



P is decrypted by D 



Decrypt 



Sign 



S = D {M} 



M is signed by D 



Verify 



E {S} => M 



S is verified by E 



where 



P 

E 
D 



Ciphertext 

Public Key (pair e, n) 
Private Key (pair d, n) 
Modulus of Key pair E, D 
Plaintext 
Signed Message 
Cryptographic Function 



n 



M 

S 

{} 



FIG. 6: Standard Formulae of RSA 
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Step 



*0 (700) 



*3 



*4 



*5 



*6 



*7 



(705) 



System Authority 
O 



where 

Nx 

Do 

Eo 

Dx 

Ex 

Lx 



Generate Key Pair 
Do, Eo 





(702) 




(703) 




(704) 


Sign on Ex: 


Lx = Do {Ex} 




(706) 



Entity 
X 



(701) 



Generate Key Pair 
Dx,Ex 



Request Authorization; 
Send ID # Nx 



Request Public Key 



Send Public Key Ex 



Send Lx 



Store Lx 



ID#of X 

Private Key of System Authority O 
Public Key of System Authority O 
Private Key of Entity X 
Public Key of Entity X 
Certificate issued to X 



FIG. 7: Preparation Flow of RSA 
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Step Authenticator Y 

*0 (800) 



= 1 



*2 



*3 (803) 



*4 



*5 



*6 



*7 (807) 



*8 



where 

Eo 

Dz 

Ez 

Lz 

Qz 
Rz 



Authenticatee Z 



Preparation: 
Obtain and store Eo from O 



(802) 



Verify Lz: 
Eo {Lz} =>Ez 



(804) 



(806) 



Verify Rz: 
Ez {Rz} => Qz 



(808) 



(801) 



Generate Dz, Ez; obtain and 
store Lz from O 



Request Authentication: 
Send Nz, Ez, Lz 



Send Challenge Qz 



(805) 



Sign on Qz with Dz: 
Rz = Dz {Qz} 



Return Response Rz 



Send Result 



Public Key of System Authority O 
Private Key of Z 
Public Key of Z 
Certificate issued to Z 

Challenge Message, Random Number sent to Z 
Response from Z, Signed Message 



FIG. 8: Flow of Regular RSA Key Authentication 
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Step 



*0 (900) 



System Authority 
O 



Entity 
X 



Preparation: 

Generate Key Pair Do, Eo 



(905) 



(902) 



Request Authorization: 
Send ID # Nx 



Sign on Nx: 
Cx = Do {Nx} 
= Nx d0 (mod no) 



*6 



(906) 



Send Cx 



(908) 



Store Cx 



where 

Nx : ID#ofX 

Do : Private Key of System Authority O 

Eo : Public Key of System Authority O 

do : Private Exponent 

no : Modulus of key pair Do, Eo 

Cx : Secret Key of X 



FIG. 9: Preparation Flow of This Invention, S-RSA 
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Sign 



Sx = Mx {Cx} 
= Cx Mx (mod no) 



(1006) 



Verify 



Eo {Sx} 
= Sx 60 (mod no) 
= Cx Mx * eo (mod no) 
= Nx doWeo (modno) 
= Nx Mx (mod no) ) 



Since Nx" 0 * 60 (mod no) = Nx 



(1008) 



where 




Nx 


ID # of X or License # issued to X 


Do 


Private Key of System Authority O 


do 


Private Exponent 


Eo 


Public Key of System Authority O 


eo 


Public Exponent 


no 


Modulus of key pair Do, Eo 


Cx 


Secret Key of X where Cx = Nx do (mod no) 


Mx 


Message of X 


Sx 


Message Signed by X 



FIG. 10: Signing Formulae of This Invention, S-RSA 
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Step Authenticator Y 

*0 (1100) 



Authenticatee Z 



Preparation: 
Obtain Eo from O 



*2 

*4 

*5 
*6 

*7 (1107) 

*8 



where 

Nz 

Eo 

Cz 

Qz 

Rz 





(1102) 




(1104) 




(1106) 


Verify Rz: 


Eo {Rz} => Nz Qz 




(1108) 



(1101) 



Obtain and store 
Eo and Cz from O 



Request Authentication: 
SendID#Nz 



Send Challenge Qz 



(1105) 



Return Response Rz 



Send Result 



ID # of Z, or License # issued to Z 
Public Key of System Authority O 
Secret Key of Z 

Challenge Message, Random Number sent to Z 
Response from Z, Signed Message 



Sign on Qz: 
Rz = Qz {Cz} 



FIG. 11: Authentication Flow of This Invention, S-RSA 
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Step 

*0 (1200) 



*2 



*3 



*5 



*6 



*8 



Local System Terminal 
J ID#Nj 



User 

I ID#Ni 



(1203) 



*4 (1204) 



(1205) 



where 

Nj 

Nj-1 

Eo 

Cj 

$j-l 

$J 

Sj-1 

Sj 



Preparation: 
Eo.Cj 



(1201) 



Preparation: 
$j-l, Sj-1, Nj-1 



(1202) 



Payment: 

Send $j-l, Sj-1, Nj-1 



Verify Sj-1 



Calculate new balance $j 
I 



Sign on $j 
Sj = $j {Cj} 



(1206) 



Send $j, Sj, and Nj 



(1208) 



Store 



ED # of Local System Terminal J 
ID # of Most Recently Visited Terminal j-1 
Public Key of System Authority O 
Secret Key of Terminal J 

Present Balance received from Most Recently Visited Terminal j-1 
New Balance 

Present Balance signed by J-1 
New Balance signed by J 



FIG. 12: Signing Payment Flow of This Invention, S-RSA 
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Pz = Ey {Mz} 
= Mz ey (mod ny) 

s Mz to Y, wrapping it with Y's public key Ey 



(1302) 



Z sends message ] 



where 




Y 


: Authentic ator 


Z 


: Authenticatee 


Ey 


: Public Key of Entity Y 


ey 


: Public Exponent 


ny 


: Modulus of Y's Public Key 


Mz 


: Message of Z 


Pz 


: Encrypted Message of Z 



P = M e (mod n) 



(1304) 



P = (M 2 ) 16 *(M)(modn) 
= (M 2 ) 2 ...) 2 * (M) (mod n) 
since E = 2 U + 1 



(1306) 



Multiplicative and modular operations must be repeated 17 times 



where 

E 

n 

M 

P 



Public Key 

Modulus of Public Key 
Plain Message 
Encrypted Message 



FIG. 13: Secure Socket Layer Communication 
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If Qz is a 16 bit number 

and Qz = 2 15 * bis + 14 * b14 + " + 1 * M + 0 * w 

where bi = 0 or 1, then 



Qz {Cz} 
= (Cz 2 ) 15 * bls * 
ifbi = 0. 
(Cz 2 r bi = l 



(Cz 2 ) 14 * b14 *...*(Cz 2 ) 1 * bl * (Cz) b0 (mod No) 



(1402) 



Therefore, if a table of (Cz 2 ) 1 is pre-calculated, only eight multiplicative and modular 
operations must be performed on average. 



The table size is 

16 x 1024 bit = 2KB 

(1404) 



FIG. 14: Calculation Time of This Invention, S-RSA 
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Cz 


XXX X X X X X 


(Cz 2 ) 1 (mod no) 




(Cz 2 ) 2 (mod no) 




(Cz 2 ) 3 (mod no) 




(Cz 2 ) 15 (mod no) 


XXX X X X X X 


2 Bytes 


1024 bit 



Total 32 Bytes + 2 KBytes 



FIG. 15: Table of Powers of Cz 



